A security vulnerability has been identified in Ray, a development tool commonly used to build and test websites and web applications. This is a code injection flaw, which means bad actors could potentially run their own unauthorized, harmful code on systems running the affected version of Ray. This vulnerability can be exploited when accessing Ray through the Firefox or Safari web browsers, so developers and teams that rely on Ray for development work may be exposed to this risk.
Source: CISA Known Exploited Vulnerabilities Catalog — https://nvd.nist.gov/vuln/detail/CVE-2025-62593
